Privacy Policy
Draft for Jon to review before this goes live. Blocks / AeroToolCrib. Contact jblocks@blocksavimx.com. This is not legal advice and it is not the final policy.
Draft for Jon to review. Last updated November 12, 2026. This is not the final policy.
Who we are
AeroToolCrib is a product of Blocks. Questions about this draft go to jblocks@blocksavimx.com.
What we collect
- Account data: name, email, password hash, account type, and the time you accepted the terms.
- Profile data you add: certificates, shop, aircraft experience, and a resume file.
- Things you write: posts, replies, job listings, applications, and photos.
- Shop tools you save: weight and balance sheets, calibration dates, AD watches, and quiz scores.
- Job-alert preferences, and a push token if you turn notifications on.
- Subscription status from Stripe. Card numbers are entered on Stripe, not stored here.
- A sign-in cookie, and the IP address used to slow down abuse of sign-in and applications.
Why
We use this to run the library, the technician network, the news feed, job applications, reminders, and the yearly subscription. Resumes and photos stay private. An employer sees a resume only when you apply to that employer's job.
Who else sees it
Hosting is on Vercel. The database is managed Postgres. Files sit in private storage. Email, when it is turned on, goes through Resend. Payments go through Stripe. If you enable push, Apple or Google delivers the notification. FAA and news links leave this site.
How long, and how to delete it
The account stays until you delete it. In the app, open Profile, then Settings, then Delete account. Confirm with your password and the word DELETE. We cancel Stripe renewal when a subscription is connected, delete the private files we still hold for you, delete the records tied to the account, and sign you out. Password-reset links expire after one hour.
Cookies
A single httpOnly cookie keeps you signed in. It is marked secure when the site is served over HTTPS.
The Terms explain what you can post.